$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft File: 9FYY6ic_QLS8aF4piH4gUIPEkKY.mft (raw, json) Hash identifier: yO0rpbbW8agQPcZXSGbOavlSQdgsDPCa/AePSk5ZqY8= Subject key identifier: CB:56:23:E3:9F:E0:57:10:20:97:B6:49:59:8C:CC:AA:6A:CE:32:67 Authority key identifier: F4:56:18:EA:27:3F:40:B4:BC:68:5E:29:88:7E:20:50:83:C4:90:A6 Certificate issuer: /CN=A91C3E37/serialNumber=F45618EA273F40B4BC685E29887E205083C490A6 Certificate serial: C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FYY6ic_QLS8aF4piH4gUIPEkKY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft Manifest number: C6 Signing time: Fri 31 May 2024 07:04:43 +0000 Manifest this update: Fri 31 May 2024 07:04:43 +0000 Manifest next update: Fri 07 Jun 2024 07:04:43 +0000 Files and hashes: 1: 9FYY6ic_QLS8aF4piH4gUIPEkKY.crl (hash: JKh5ccg+i+4WIMsHCh3DqJb+vVWN4IIS7Uy66XKfvNI=) 2: 9BBCC1F60D2411EEA8431074C4F9AE02.roa (hash: mr9bH4na8Ni92Bl0tYhwxMl9YdPdkp1y6gqdJLkZgso=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.crl rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FYY6ic_QLS8aF4piH4gUIPEkKY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:04:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 199 (0xc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3E37/serialNumber=F45618EA273F40B4BC685E29887E205083C490A6 Validity Not Before: May 31 07:04:43 2024 GMT Not After : Jun 7 07:04:43 2024 GMT Subject: CN=6659768b-556d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:eb:97:12:1c:0a:fd:39:b2:98:44:c7:36:10: 3a:87:f6:50:e3:b6:cf:c4:92:04:45:8b:71:da:49: 23:03:80:4d:a5:65:9e:49:bc:7b:27:a6:16:bd:52: 0f:8a:7a:27:e5:01:aa:92:95:15:f6:42:87:cb:92: 54:cb:f1:b6:c2:1e:be:44:7e:83:27:84:69:82:88: 8d:3c:33:77:04:01:1a:ad:b5:57:a4:f9:30:34:1d: 4f:32:75:63:2b:17:3b:72:e0:59:f4:00:e9:cc:09: d4:e3:9d:bb:49:91:ba:06:9a:a4:ca:9a:83:a8:0f: 89:d2:4b:ca:49:ad:eb:fc:18:93:06:81:66:10:ba: 4c:ff:18:50:14:3c:13:1a:a3:91:68:b9:f3:fb:04: 09:5f:f0:19:3d:e5:b0:6a:c6:97:54:46:1a:93:b5: 8f:1e:2b:0e:46:b5:6b:08:6b:43:49:50:b9:11:19: e5:dc:5c:0b:e4:59:2d:79:57:a0:6a:6f:44:28:22: bb:5c:dc:d8:44:70:a5:a1:63:8c:a3:f9:fc:ac:f3: b0:91:05:f9:dd:45:76:d3:d8:49:29:eb:d7:b2:87: fd:c2:58:97:d3:25:42:6d:f0:15:2d:b1:5d:be:f6: 54:a6:0d:d1:d5:8d:10:a3:41:05:5a:89:53:d9:a0: e0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:56:23:E3:9F:E0:57:10:20:97:B6:49:59:8C:CC:AA:6A:CE:32:67 X509v3 Authority Key Identifier: keyid:F4:56:18:EA:27:3F:40:B4:BC:68:5E:29:88:7E:20:50:83:C4:90:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FYY6ic_QLS8aF4piH4gUIPEkKY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:1f:b1:55:35:5f:e2:12:af:c0:df:f4:41:bc:da:2d:b1:aa: ab:ed:06:e2:12:c3:a9:8f:7f:36:67:4d:56:3f:db:3a:ef:ec: 76:51:76:8c:79:58:69:c6:5d:84:04:6a:ad:61:18:65:9c:a0: 7e:5b:55:56:dc:aa:70:f2:13:e2:f2:bd:d2:b8:f1:00:76:e6: ab:ca:4d:fe:42:23:d9:4f:53:b7:99:f9:46:21:c1:dc:e9:07: 49:df:6b:04:53:2e:2c:81:2e:99:4f:38:48:f9:cf:4f:12:05: 02:c9:1c:95:d1:bb:f5:05:db:b7:78:9b:65:ce:dc:73:bb:01: 55:98:55:34:33:e4:a9:96:d7:da:be:d4:7f:a7:c1:40:77:9e: 80:eb:e9:a3:7d:4d:60:8c:6d:b3:f7:c8:a2:82:ea:70:d9:76: fd:e6:26:33:28:6d:9f:d5:b6:f7:7c:5d:9c:c8:93:59:10:54: e3:d6:d3:f2:d6:6f:38:a0:c9:4d:d3:b9:9f:b2:c6:0f:28:34: d6:ed:ff:55:7a:72:f8:61:18:76:5c:8b:4b:df:a0:c3:32:4a: dd:6a:92:25:b6:97:dd:63:97:e3:13:6a:4b:7c:7d:70:ef:6b: 32:a6:71:a9:ba:df:95:14:d6:6d:b8:df:29:41:a9:c0:fb:84: 88:7b:d1:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNFMzcxMTAvBgNVBAUTKEY0NTYxOEVBMjczRjQwQjRCQzY4NUUyOTg4N0UyMDUw ODNDNDkwQTYwHhcNMjQwNTMxMDcwNDQzWhcNMjQwNjA3MDcwNDQzWjAYMRYwFAYD VQQDEw02NjU5NzY4Yi01NTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1uuXEhwK/TmymETHNhA6h/ZQ47bPxJIERYtx2kkjA4BNpWWeSbx7J6YWvVIP inon5QGqkpUV9kKHy5JUy/G2wh6+RH6DJ4RpgoiNPDN3BAEarbVXpPkwNB1PMnVj Kxc7cuBZ9ADpzAnU4527SZG6BpqkypqDqA+J0kvKSa3r/BiTBoFmELpM/xhQFDwT GqORaLnz+wQJX/AZPeWwasaXVEYak7WPHisORrVrCGtDSVC5ERnl3FwL5FkteVeg am9EKCK7XNzYRHCloWOMo/n8rPOwkQX53UV209hJKevXsof9wliX0yVCbfAVLbFd vvZUpg3R1Y0Qo0EFWolT2aDguwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMtWI+Of 4FcQIJe2SVmMzKpqzjJnMB8GA1UdIwQYMBaAFPRWGOonP0C0vGheKYh+IFCDxJCm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0UzNy9CNDQ1NTNEOEYw OUYxMUVEOUI0QTA3MzRDNEY5QUUwMi85RllZNmljX1FMUzhhRjRwaUg0Z1VJUEVr S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGWVk2aWNfUUxTOGFGNHBpSDRnVUlQRWtLWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0UzNy9CNDQ1NTNEOEYwOUYxMUVEOUI0QTA3MzRDNEY5QUUwMi85RllZNmljX1FM UzhhRjRwaUg0Z1VJUEVrS1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXH7FVNV/iEq/A3/RBvNotsaqr7QbiEsOpj382Z01WP9s67+x2UXaM eVhpxl2EBGqtYRhlnKB+W1VW3Kpw8hPi8r3SuPEAduaryk3+QiPZT1O3mflGIcHc 6QdJ32sEUy4sgS6ZTzhI+c9PEgUCyRyV0bv1Bdu3eJtlztxzuwFVmFU0M+Spltfa vtR/p8FAd56A6+mjfU1gjG2z98iigupw2Xb95iYzKG2f1bb3fF2cyJNZEFTj1tPy 1m84oMlN07mfssYPKDTW7f9VenL4YRh2XItL36DDMkrdapIltpfdY5fjE2pLfH1w 72sypnGput+VFNZtuN8pQanA+4SIe9Gx -----END CERTIFICATE-----Generated at Fri May 31 08:39:00 2024 by rpki-client on console-fra.rpki-client.org